This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json) Hash identifier: zYyj2R/o80yqLYtOD1TqmZEZid8n9WcDn3VMnw/WJkM= Subject key identifier: FC:2D:4A:D9:49:95:C8:C2:68:EE:23:1D:7A:57:64:27:E3:C4:12:65 Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Certificate serial: 019B4E16D6AD27943CF314AFE7B6A76D2BBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft Manifest number: 04EA Signing time: Wed 24 Dec 2025 02:01:17 +0000 Manifest this update: Wed 24 Dec 2025 02:01:17 +0000 Manifest next update: Thu 25 Dec 2025 02:01:17 +0000 Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=) 2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=) 3: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: cFGgvy8MbSdel43VLBVTeMpPRe0Ly8alqHid98LxY94=) 4: yI_sQi09bI0wEcczv9p69pOMi4I.roa (hash: eG5dij8lJvkaSq+tZToxmG67gJ6Yw6xpufVtIpPZnsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:d6:ad:27:94:3c:f3:14:af:e7:b6:a7:6d:2b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Validity Not Before: Dec 24 02:01:17 2025 GMT Not After : Dec 25 02:01:17 2025 GMT Subject: CN=fc2d4ad94995c8c268ee231d7a576427e3c41265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:cc:40:ca:5a:d8:75:5a:74:f1:26:a0:50: 94:31:da:f5:92:b4:59:15:2e:a4:e8:8c:38:1e:53: ef:41:7b:8d:c9:da:e3:8a:eb:d5:54:f7:bb:6b:90: 2c:f8:8e:e3:e7:5a:a5:47:2f:4d:82:65:a2:20:ca: d9:37:0f:82:3b:16:f0:26:b3:83:ca:0b:0f:5a:cd: d2:c7:1b:5d:e7:9c:d2:e7:c0:0e:7e:ca:6d:69:cd: 84:e7:88:80:1c:63:0c:2d:af:36:7e:41:57:9e:96: 0d:4f:52:e0:ee:be:0e:c7:ce:30:de:fa:c0:60:68: a6:2c:00:fb:2b:a3:0e:2c:0c:b0:fa:80:04:db:2a: 0e:d2:cd:89:6a:7f:54:8d:47:3b:41:91:74:79:18: 6b:da:dc:c8:a2:f0:8b:70:c9:4a:58:08:2a:64:ac: 36:9b:86:4d:bf:c8:d0:6b:db:79:68:ef:41:63:3e: 09:7d:88:ac:7a:d7:6d:75:62:11:11:49:4e:c3:3b: 6a:f4:b7:91:3a:89:21:1d:95:dd:22:a2:bd:4f:c8: d0:fe:c1:96:7f:6a:64:5a:b1:6c:e5:67:fd:0a:ba: f3:7b:c7:f3:ff:2b:4d:ee:a7:6f:1f:c3:cb:06:c0: ca:d0:5f:7b:e7:3f:d0:99:7d:e0:d7:4c:8e:6d:27: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:4A:D9:49:95:C8:C2:68:EE:23:1D:7A:57:64:27:E3:C4:12:65 X509v3 Authority Key Identifier: keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5d:76:b7:a4:d2:d2:d6:89:82:3b:ca:5c:f7:ff:0e:7b:a6: db:66:81:7a:e6:a1:10:df:5a:60:64:31:23:95:12:12:85:d0: 66:f3:86:ec:97:e5:88:8f:d5:cf:6e:c4:23:5c:3b:96:07:e6: 39:8a:ca:78:52:ff:cb:0e:52:3b:55:67:1b:d3:eb:14:40:d0: 9b:1e:1e:98:1c:07:24:38:7a:cd:c3:f7:89:ce:90:c1:e6:6f: db:f6:0a:85:f7:be:85:37:2a:06:eb:b8:96:a6:8a:72:4b:c7: df:9d:5c:40:b0:e2:1c:95:24:08:12:af:cc:b8:dc:5c:4e:a7: c8:fe:d5:cb:0a:fb:4d:95:b0:eb:bc:48:60:00:61:a7:be:d0: 5c:b8:10:bf:4b:66:a6:d4:3f:9f:1c:f2:ff:d5:7b:45:c4:88: 73:0f:c0:d1:b4:4d:54:16:b5:ed:09:60:44:f5:26:af:4f:64: b9:6d:a1:d0:af:e1:ce:6d:d4:56:4c:64:1e:a5:3e:2f:6c:62: 98:34:5c:6b:5f:7f:bc:07:b1:ee:a9:6b:bd:ff:49:96:82:9b: cc:19:45:a5:e6:0c:c6:40:3a:7b:09:50:2f:b8:46:b7:16:3e: b7:4c:19:2d:af:69:33:f2:0f:6f:7a:ea:47:64:a8:b9:99:c3: b4:a9:10:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFtatJ5Q88xSv57anbSu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm MjhmNmMwHhcNMjUxMjI0MDIwMTE3WhcNMjUxMjI1MDIwMTE3WjAzMTEwLwYDVQQD EyhmYzJkNGFkOTQ5OTVjOGMyNjhlZTIzMWQ3YTU3NjQyN2UzYzQxMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWnMQMpa2HVadPEmoFCUMdr1krRZ FS6k6Iw4HlPvQXuNydrjiuvVVPe7a5As+I7j51qlRy9NgmWiIMrZNw+COxbwJrOD ygsPWs3Sxxtd55zS58AOfsptac2E54iAHGMMLa82fkFXnpYNT1Lg7r4Ox84w3vrA YGimLAD7K6MOLAyw+oAE2yoO0s2Jan9UjUc7QZF0eRhr2tzIovCLcMlKWAgqZKw2 m4ZNv8jQa9t5aO9BYz4JfYisetdtdWIREUlOwztq9LeROokhHZXdIqK9T8jQ/sGW f2pkWrFs5Wf9Crrze8fz/ytN7qdvH8PLBsDK0F975z/QmX3g10yObSfXkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwtStlJlcjCaO4jHXpXZCfjxBJlMB8GA1UdIwQY MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt YTM4NTU1MDVlYTJlLzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZl12t6TS 0taJgjvKXPf/Dnum22aBeuahEN9aYGQxI5USEoXQZvOG7JfliI/Vz27EI1w7lgfm OYrKeFL/yw5SO1VnG9PrFEDQmx4emBwHJDh6zcP3ic6QweZv2/YKhfe+hTcqBuu4 lqaKckvH351cQLDiHJUkCBKvzLjcXE6nyP7Vywr7TZWw67xIYABhp77QXLgQv0tm ptQ/nxzy/9V7RcSIcw/A0bRNVBa17QlgRPUmr09kuW2h0K/hzm3UVkxkHqU+L2xi mDRca19/vAex7qlrvf9JloKbzBlFpeYMxkA6ewlQL7hGtxY+t0wZLa9pM/IPb3rq R2SouZnDtKkQig== -----END CERTIFICATE-----Generated at Wed Dec 24 10:08:42 2025 by rpki-client